chore(deps): update all non-major dependencies #1083

renovate · 2025-10-13T02:41:09Z

This PR contains the following updates:

Package	Change	Age	Confidence
@types/node (source)	`^22.18.8` -> `^22.18.10`
deno (source)	`v2.x` -> `2.5.4`
knip (source)	`^5.64.2` -> `^5.65.0`
pnpm (source)	`10.18.1` -> `10.18.2`
semver	`^7.7.2` -> `^7.7.3`
srvx (source)	`^0.8.9` -> `^0.8.16`

Release Notes

denoland/deno (deno)

`v2.5.4`

Compare Source

fix(cache): don't try to set up node_modules with node_modules_dir manual in
deno cache (#30957)
fix(cli): jsx pragma-related swc panics (#30935)
fix(ext/node): fs.cp and fs.cpSync compatibility (#30502)
fix(ext/node): fs.stat and fs.statSync compatibility (#30866)
fix(ext/node): avoid stack overflow in node:zlib's gunzip (#30865)
fix(ext/node): fs.realpath buffer encoding (#30885)
fix(ext/node): inspect X509Certificate class (#30882)
fix(ext/node): map BadResource error to the corresponding node error (#30926)
fix(ext/node): omit smi from zlib.crc32 op function (#30907)
fix(tunnel): prevent auth subprocess loop with tasks (#30896)
fix(tunnel): unhide --tunnel flag (#30940)
fix(update): preserve tilde in version range (#30946)
fix(webgpu): crash after isolate disposal (#30909)
fix: use ArrayIsArray primordial (#30927)

`v2.5.3`

Compare Source

feat(unstable): add permission broker (#30826)
feat(unstable): permission broker - support custom error messages (#30902)
feat(unstable): support named pipes on Windows for the permission broker
(#30894)
fix(check): do not error for unsupported URL schemes (#30904)
fix(clean): do not panic on failure to get local cache path in clean --except
(#30895)
fix(cli/util): terminate watch file with sigint (#30635)
fix(dts): update some GPU types to not cause errors in upcoming DOM type
declarations (#30893)
fix(ext/node): allow ATTACH DATABASE with --allow-all (#30763)
fix(ext/node): setTimeout promisified to handle abort signal (#30855)
fix(fs): improve file stat checks (#30876)
fix(fs): improve file utime checks (#30872)
fix(npm): do not error when packument version contains both bundleDependencies
and bundledDependencies (#30875)
fix(unstable/tunnel): rename --connected to --tunnel and better handle
DENO_DEPLOY_TOKEN env variable (#30786)
fix: add support for passing v8 flags on deno check (#30868)
fix: do not purge lockfile when linking and the linked package's reqs have not
changed (#30877)
fix: show --permission-set help only once (#30844)

`v2.5.2`

Compare Source

feat(lsp): describe/it test editor support (#30802)
fix(bundle): reload html entrypoints with --watch (#30790)
fix(check): support "compilerOptions.paths" (#30766)
fix(cli/bundle): respect --frozen flag deno bundle command (#30825)
fix(coverage): collect coverage data for workers (#30807)
fix(dts): add Uint8Array base64/hex methods (#30686)
fix(dts): update stream type declarations to use Promise<void> (#30820)
fix(ext/node): fs.readFile, fs.readFileSync assert encoding (#30830)
fix(ext/node): fs.statfsSync and fs.statfs compatibility (#30662)
fix(ext/node): accept ArrayBuffer on crypto.timingSafeEqual (#30773)
fix(ext/node): crypto Cipheriv and Decipheriv base64 encoding (#30806)
fix(ext/ws): send User-Agent header in WS handshake (#30758)
fix(fetch): handle proxied urls correctly and add test (#30794)
fix(lint): skip module graph validation (#30815)
fix(tunnel): make auth more robust (#30731)
fix: add top level permissions key to config file schema (#30765)
fix: reject running .bat and .cmd directly on windows (#30818)
fix: restore Windows debug info (#30778)
perf(lsp): don't watch node_modules files (#30768)
perf: stack allocated v8 scopes (#30827)
perf: support negative caching of package.json (#30792)

`v2.5.1`

Compare Source

feat(unstable): support Deno.HttpClient in WebSocket (#30692)
feat(unstable): tcp proxy for Deno.HttpClient (#30700)
fix(bundle): set the type of the outputFile in the deno bundle to
Uint8Array<ArrayBuffer> (#30716)
fix(check): filter resolution errors for bare ambient modules (#30690)
fix(ext/fetch): mark unix and vsock proxy conns as proxy (#30699)
fix(ext/node): handle falsy values enumerability in process.env (#30708)
fix(ext/node): implement fchmod on windows (#30704)
fix(ext/node): make fs.glob accepts URL cwd (#30705)
fix(ext/node): set default callback for fs.close (#30720)
fix(ext/node): validate fs.close callback function (#30679)
fix(ext/node): validate fs.read on empty buffer (#30706)
fix(ext/node): validate readlink arguments (#30691)
fix(ffi): check that fast calls are taken (#30658)
fix(http): duplicate listener should inherit onError and signal (#30680)
fix(init): regression where deno init --npm stopped working on mac (#30730)
fix(lsp): don't write lockfile during cache-on-save (#30733)
fix(node): reduce chance of module not found error due to missing copy package
(#30744)
fix(permissions): point to correct config file in error message in workspace
containing permissions at root (#30742)
fix: Add info/hint for unstable Deno.bundle API (#30682)

`v2.5.0`

Compare Source

`v2.4.4`

Compare Source

feat(unstable): add json repl (#30307)
feat(unstable): allow setting headers on EventSource (#30278)
feat(unstable): allow specifying default path and path prefix (#30320)
feat(unstable): implement custom inspect for AtomicOperation (#30077)
fix(bundle): require of sub directory in npm package should consult
package.json (#30253)
fix(bundle): support importing directories with a package.json from an es
module when bundling (#30273)
fix(bundle): use non-node conditions for --platform=browser (#30250)
fix(check): do not surface code resolution errors in declaration file
dependencies (#30296)
fix(compile): ensure Deno.build.standalone is set in workers (#30335)
fix(ext/node): fs.open and fs.openSync compatibility (#30191)
fix(ext/node): fs.rename and fs.renameSync compatibility (#30245)
fix(ext/node): fs.unlink and fs.unlinkSync compatibility (#30257)
fix(ext/node): accept base64url encoding on StringDecoder (#30366)
fix(ext/node): assign 'ERR_BUFFER_TOO_LARGE' to codes (#30311)
fix(ext/node): avoid panic when crypto.randomInt has no arguments (#30314)
fix(ext/node): define fs constants correctly across platforms (#30113)
fix(ext/node): fs readv promisify compatibility (#30149)
fix(ext/node): handle large buffer correctly (#30369)
fix(ext/node): incorrect ERR_INVALID_ARG_VALUE constructor arguments
position (#30309)
fix(ext/node): make some os exported properties read only (#30374)
fix(ext/node): parse fs open options correctly (#30300)
fix(ext/node): support TLS for unix sockets (#30169)
fix(ext/node): use custom allocator for brotli (#30277)
fix(ext/node): use primordials in
ext/node/polyfills/internal_binding/buffer.ts (#30287)
fix(ext/node): use primordials in
ext/node/polyfills/internal_binding/node_file.ts (#30066)
fix(ext/node): worker_threads handles basic require calls (#30279)
fix(io): do not autoClose stdin readable stream (#30345)
fix(lsp): use referrer compiler options for node_modules files (#30275)
fix(publish): remove incorrect relative-package-import diagnostic when root
of workspace is package (#30333)
fix(unstable): lint node properties should be enumerable (#30391)
fix(unstable): update deno_tunnel for better reconnect errors (#30381)
fix(update): update version reqs even if locked to latest version (#30249)
fix: android build (#30360)
fix: improve handling of linked jsr packages in lockfile (#30289)
fix: make unmet peer dep error message less verbose (#30312)
fix: reduce progress bar flickering (#30349)
fix: upgrade @node/types to 24 (#30343)
fix: upgrade deno_core to 0.355.0 (#30352)
perf(napi): misc napi optimizations (#30291)
perf: use more efficient structuredClone API (#30258)
perf: reduce heap allocations and memory creating cjs wrapper module (#30344)

`v2.4.3`

Compare Source

feat(unstable): add useful metadata to tunnel (#30161)
fix(bundle): don't force managed npm resolution (#30200)
fix(check): ensure module not found errors are surfaced (#30181)
fix(compile): do not error including npm packages that don't match current
system (#30188)
fix(compile): do not include managed npm deps when graph does not have any npm
pkgs (#30189)
fix(ext/node): fs.read and fs.write promisify compatibility (#30152)
fix(ext/node): add process._rawDebug (#30141)
fix(ext/node): fix segmentation fault when spkac is empty (#30207)
fix(ext/node): implement TLSSocket.getPeerCertificate (#30146)
fix(ext/node): implement tls.checkServerIdentitiy (#30148)
fix(ext/node): use Zlib base for brotli handles (#30112)
fix(ext/node): use primordials in
ext/node/polyfills/internal_binding/_listen.ts (#30100)
fix(ext/node): use primordials in
ext/node/polyfills/internal_binding/pipe_wrap.ts (#30241)
fix(ext/node): validate fd is integer on fsync and fdatasync (#30215)
fix(http): catch more tunnel close errors (#30236)
fix(lib/node): change ERR_INVALID_PACKAGE_TARGET to
ERR_PACKAGE_PATH_NOT_EXPORTED when no package.json#exports condition matches
(#29841)
fix(lsp): do not error for bytes or text import of json module (#30137)
fix(lsp): improve renaming a file with bytes or text imports (#30142)
fix(publish): improve diagnostic when importing from another package using a
relative import (#30203)
fix(regression): do not error when specifying --config flag with ../
component (#30208)
fix(task): --recursive - order tasks by package dependencies (#30129)
fix(task): improve parsing of quotes in command substitution (#30162)
fix(task): show package name of task when --recursive (#30136)
fix(tsconfig): don't use tsc-compatible defaults for deno.json compiler
options (#30242)
fix: do not panic deserializing config with invalid number value (#30171)
fix: don't invoke Proxy getter trap on console.log (#30230)
fix: ensure coverage dir is stored absolute to prevent issues when cwd changes
(#30225)
fix: reduce change of corrupt lockfile error when updating dependencies in the
config file (#30239)
fix: support package.json imports in a Deno workspace (#30198)
fix: tunnels in processes that don't listen (#30178)
fix: update setTimeout and setInterval callback type to support strin…
(#30183)
fix: use 'deno_signals' crate for signal handling (#30204)
perf(buffer): optimize Buffer.subarray and Buffer.prototype.utf8Slice (#30213)

`v2.4.2`

Compare Source

fix(bundle): default "jsxImportSource" to "react" (#30082)
fix(check): temporarily ignore ERR_TYPES_NOT_FOUND (#29926)
fix(ext/node): don't throw error on invalid path input on exists and
existsSync (#29971)
fix(ext/node): validate path parameters on link and linkSync (#30061)
fix(lint): do not panic for many overlapping lint fixes (#30104)
fix(lsp): tsconfig features for 'deno check' parity (#30007)
fix(tsconfig): prioritize deno.json if it has compiler options (#30056)
fix(tsconfig): use tsc defaults for 'strict' and 'noImplicitOverride' (#30045)
fix(unstable): support importing files in npm packages as bytes and text
(#30065)
fix: global global should be writeable (#30032)
fix: early init logging (#30034)
fix: new signal handling (#30029)
fix: upgrade deno_core to 0.352.1 (#30119)

`v2.4.1`

Compare Source

feat(unstable/otel): support vsock transport for telemetry (#30001)
feat(unstable): tunnelling (#30022)
fix(bundle): don't use createRequire when targeting browser, make hack not
depend on variable names (#30023)
fix(bundle): make the "dynamic require" hack work on minified output (#29997)
fix(bundle): resolve "sloppy imports" in npm packages when bundling (#29989)
fix(ext/http2): fix oob buffer reads in http2 requests (#29969)
fix(serve): actually wire up resolving main module with import map for deno
serve (#29974)
fix(unstable): bytes and text imports from npm dependencies should require
--allow-read (#29990)
Revert "fix(ext/napi): ensure the finalizer callback will be called (…
(#30018)
Revert "fix(otel): flush data when terminating signal is received (#2…
(#30019)
perf: bust emit cache only on deno_ast version change (#29984)
perf: skip jsx transpile when disabled (#29995)

`v2.4.0`

Compare Source

`v2.3.7`

Compare Source

feat(unstable): add --platform flag to deno bundle (#29697)
feat(unstable): add --sourcemap flag to deno bundle (#29735)
feat(unstable): add watch mode to deno bundle (#29795)
feat: allow base64 ca cert in args (#29814)
fix(bundle): enable sloppy imports by default when bundling (#29731)
fix(bundle): improve error handling and reporting (#29744)
fix(bundle): parse the allow-import flag, fix example in help text (#29733)
fix(bundle): transform import.meta.main (#29830)
fix(ext/napi): ensure the finalizer callback will be called (#29710)
fix(ext/node): DiffieHellman constructor behaviors (#29718)
fix(ext/node): Fix crypto.pbkdf2 compat (#29738)
fix(ext/node): Module.wrap cleanup for npm:v8-code-cache (#29725)
fix(ext/node): add fchmod and fchmodSync (#29791)
fix(ext/node): add key length validation in
DiffieHellman.prototype.computeSecret (#29757)
fix(ext/node): add validation to Cipheriv methods (#29800)
fix(ext/node): crypto.timingSafeEqual (#29758)
fix(ext/node): deprecate Hash and Hmac constructors (#29774)
fix(ext/node): fix assertion error message of assert.ok (#29803)
fix(ext/node): fix error type in DiffieHellman constructor (#29721)
fix(ext/node): fix events.once (#29716)
fix(ext/node): fix input validation of crypto hkdf (#29775)
fix(ext/node): fix oneshot hash validation (#29661)
fix(ext/node): implement Certificate API (#29828)
fix(ext/node): improve assert.ifError (#29846)
fix(ext/node): improve comparison of faked objects in deepStrictEqual
(#29819)
fix(ext/node): improve scrypt support (#29773)
fix(ext/node): support KeyObject in publicEncrypt/privateDecrypt (#29798)
fix(ext/node): throw invalid state from getAuthTag (#29752)
fix(ext/node): use primordials in
ext/node/polyfills/internal/event_target.mjs (#29772)
fix(ext/node): use primordials in ext/node/polyfills/internal/fs/utils.mjs
(#29708)
fix(ext/node): validate auth tag for GCM mode cipher (#29739)
fix(fmt): fix handling of indent inside template language (#29616)
fix(fmt): handle TS as syntax in Svelte each block (#29789)
fix(install): ignore unknown JSR export errors on top level install (#29807)
fix(install): infer name from @scope/cli pattern (#29694)
fix(install,outdated): try to avoid building graph with incorrect exports
(#29713)
fix(jsr): allow using import.meta.resolve to resolve non-jsr remote urls
(#29831)
fix(lsp): respect media type for tsx jupyter cells (#29712)
fix(npm): support resolving npm specifiers not in graph with
import.meta.resolve for resolved packages (#29732)
fix: import.meta.resolve - do not error for non-existent files in npm
packages (#29741)
fix: do not panic when logging from outside a tokio runtime (#29728)
fix: move win32job under windows dependencies in tests/util/server (#29745)
fix: remove self from global middleware (#29734)

`v2.3.6`

Compare Source

feat(bundle, unstable): bundling backed by esbuild (#29470)
feat(ext/fetch): add support for fetch on vsock sockets (#29692)
feat(unstable): add --unstable-node-conditions flag for node resolution
(#29586)
feat(unstable): deploy subcommand (#29407)
fix(bundle): don't panic on broken pipe (#29706)
fix(bundle): fix handling of multiple entrypoints (#29651)
fix(bundle): pass requested module type to load (#29683)
fix(bundle): rework how patterns for externals are handled (#29680)
fix(compile): skip over read_dir errors when finding node_modules directories
(#29672)
fix(coverage): deno test --coverage fails when importing modules from
data: urls (#29607)
fix(ext/http): handle vsock streams in extract_network_stream (#29518)
fix(ext/node): Buffer.fill compatibility fixes (#29525)
fix(ext/node): Fix missing core_import_map node internal file path for http2
(#29644)
fix(ext/node): process.loadEnvFile returns undefined (#29717)
fix(ext/node): add back perf_hooks.markResourceTiming (#29562)
fix(ext/node): add events getMaxListeners (#29636)
fix(ext/node): disable parallel/test-crypto-secure-heap.js test (#29658)
fix(ext/node): enable Buffer pool for strings (#29592)
fix(ext/node): export StatementSync from node:sqlite (#29563)
fix(ext/node): fix Buffer.inspect compatiblity (#29617)
fix(ext/node): fix EventEmitter.on (#29682)
fix(ext/node): fix addAbortListener (#29634)
fix(ext/node): fix buffer.includes edge cases (#29591)
fix(ext/node): fix buffer.indexOf for ucs2 encoding (#29593)
fix(ext/node): fix events.getEventListeners (#29685)
fix(ext/node): fix fs.watchFile trigger (#29659)
fix(ext/node): fix inspect of CustomEvent of Node.js (#29668)
fix(ext/node): fix prototype of asymmetricKeyDetails of AsymmetricKeyObject
(#29576)
fix(ext/node): fix validation of input in setMaxListeners (#29630)
fix(ext/node): handle -p flag in spawn, fix "from dependency" check in windows
(#29611)
fix(ext/node): ignore parallel/test-eventsource-disabled.js test (#29618)
fix(ext/node): improve getaddrinfo compatibility (#29501)
fix(ext/node): internal getOpenSSLSecLevel() for tests (#29657)
fix(ext/node): make Buffer work with resizable ABs (#29578)
fix(ext/node): make DatabaseSync readOnly optional (#29564)
fix(ext/node): make conditional exports work in require() (#29640)
fix(ext/node): mark pool ArrayBuffer as untransferable (#29612)
fix(ext/node): match WebCrypto tag too small error msg with Node (#29654)
fix(ext/node): pass node.js specific flags via NODE_OPTIONS env var in spawn
(#29600)
fix(ext/node): print warnings to stderr (#29527)
fix(ext/node): return undefined instead of null in sqlite (#29567)
fix(ext/node): support 2nd arg of EventEmitter.prototype.listenerCount
(#29664)
fix(ext/node): support DEP0005 deprecation warning (#29530)
fix(ext/node): update decipherIv error properties (#29652)
fix(ext/node): update interaction between event emitters and domains ([#29632](https://redirect.github.com/denoland/deno/issu

Configuration

📅 Schedule: Branch creation - "on Monday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

pkg-pr-new · 2025-10-13T02:47:49Z

nuxt-cli-playground

npm i https://pkg.pr.new/create-nuxt@1083

npm i https://pkg.pr.new/nuxi@1083

npm i https://pkg.pr.new/@nuxt/cli@1083

commit: ad8ad0a

github-actions · 2025-10-13T02:52:27Z

📦 Bundle Size Comparison

📈 nuxi

Metric	Base	Head	Diff
Rendered	5079.11 KB	5079.88 KB	+0.77 KB (+0.02%)

➡️ nuxt-cli

Metric	Base	Head	Diff
Rendered	108.86 KB	108.86 KB	0.00 KB (0.00%)

📈 create-nuxt

Metric	Base	Head	Diff
Rendered	2178.73 KB	2179.06 KB	+0.33 KB (+0.02%)

codspeed-hq · 2025-10-13T11:28:11Z

CodSpeed Performance Report

Merging #1083 will not alter performance

_{Comparing renovate/all-minor-patch (ad8ad0a) with main (d8e89aa)}

Summary

✅ 2 untouched

renovate bot requested a review from danielroe as a code owner October 13, 2025 02:41

chore(deps): update all non-major dependencies

ad8ad0a

renovate bot force-pushed the renovate/all-minor-patch branch from 61b5a51 to ad8ad0a Compare October 13, 2025 11:14

danielroe approved these changes Oct 13, 2025

View reviewed changes

danielroe merged commit 5e5a727 into main Oct 13, 2025
12 checks passed

danielroe deleted the renovate/all-minor-patch branch October 13, 2025 17:11

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

chore(deps): update all non-major dependencies #1083

chore(deps): update all non-major dependencies #1083

Uh oh!

renovate bot commented Oct 13, 2025 •

edited

Loading

Uh oh!

pkg-pr-new bot commented Oct 13, 2025 •

edited

Loading

Uh oh!

github-actions bot commented Oct 13, 2025 •

edited

Loading

Uh oh!

codspeed-hq bot commented Oct 13, 2025

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

chore(deps): update all non-major dependencies #1083

chore(deps): update all non-major dependencies #1083

Uh oh!

Conversation

renovate bot commented Oct 13, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

Configuration

Uh oh!

pkg-pr-new bot commented Oct 13, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions bot commented Oct 13, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

📦 Bundle Size Comparison

📈 nuxi

➡️ nuxt-cli

📈 create-nuxt

Uh oh!

codspeed-hq bot commented Oct 13, 2025

Merging #1083 will not alter performance

Summary

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

renovate bot commented Oct 13, 2025 •

edited

Loading

pkg-pr-new bot commented Oct 13, 2025 •

edited

Loading

github-actions bot commented Oct 13, 2025 •

edited

Loading